"REPORT ON THE SOLUTION OF MESSAGES IN DEPTH OF THE AMERIC 



CIPHER DEVICE M-209 



Attention is celled to the apparent discrepancy between the figure 33 
appearing in figure 10 ( x 100 - 55«4.00 etc ) and the statement in the 



33 



sixth line from the bottom of page 13* The division in the text calls for 
doubling the number of positions 0 This step in chart 10 is two operations 
33 being the actual number of positions., From the textual account it is 
obvious that l, 33" is the nunber to be doubled 0 E.C* 
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AMERICAN CIPHER DEVICE H-209 



The attached is an Army Security Agency t: 
794., German title: "Bericht aber die Losung 

srtkanf achn fffrMtw-nlntftMnn K-2C9* ■ 



This is one of the reports of the Signal Intelligence Agency of the 
iraand of the German Array (OKH/GdNa/ln 7/VI)» As a result of informa 



tion received by U.S. Military Intelligence Service, Austria, they were found 
buried in a camp at Glasenbach, Austria, and were forwarded through ASA/ 
Europe to T1CCM at LSIC in May 1947» 



3o Considerable liberty has been taken in this translation (as was done 
in TICOH Doc. 2795, "Determination of the Absolute Setting of the W-l (13-209) 
by Using Ti?o Messages with Different Indicators") in order to have the text 
conform to standard Army Security Agency usege. While the techniques des- 
scribod here are quite similar to these employed in related Hagelin type 
problems the presentation has been found to be clear end self explanatory. 
One of the statistical methods is interesting because of its probable appli- 

cation in other problems. 
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REPORT ON THE SOLUTION OF KSSSAGES IN DEPTH OF THE 

MBR2CAR CIPHER DEVICE M-209 



A„ I ii t r pdae t lop : General Reaarks 



Today I have the task of giving you a short survey of the vork which ii 
being accomplished in Soction 2a on the American Cipher Machine &-209o Th^ 
vork in our section is restricted exclusively to the purely linguistic sol~ 
utioa of such machine messages, while tfce reconstruction (possible on the 
basis of such linguistic solution) of the internal setting of the machine, 
which is valid for the day, is taken up in Section lb* I should like for 



that reason here to restrict myself to the purely linguistic aspects end 
therefore to mention to you only so much of the basic construction and 



Eethod of operation of the machine as is absolutely necessary for you to 
follow ay presentation* 

First of ail a few words about the machine itself 0 It is f essentially, 
a machine of the Eagelin type, which i3 known by the Americans under the 
title M-209, but is known by us either as AII~1 or BC-38« It \:as produced in 
Sweden* The machine belongs to the same type as the already well-known EC- 
36, and follov/s the same cryptographic principle^ I ^ill not explain here 



in detail the basis of this principle; let rae just remark (because this is 
important for linguistic solution) that it is a matter of encipheraerit by 
jr.eans of polyalphabotic substitution,. i*e 0f each letter of a message is en 
ciphered with a different substitution^ The machine is so built that a 



repetition of the same substitution sequence appears only after 101, 4C:.S, 
850 substitutions. This number corresponds to the product of the lengths 
of the 6 keywhselo in the machine, whose lengths are 26, 25, 23, 21, 3.9, and 



prime 



the 26 wheel all the letters 



the alphabet are represented; on the 25 wheel *lt n is missing; on the 23 wheel 



1 
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W W, Y, Z" are missing; on tho 21 wheel "V, K, X, I, Z K are missing; on the 
19 wheel "T, U, V, W, X, T, Z" are missing; and on the 17 wheel all the 
letters from rt Ii to Z n are missing,, With a daily change of the internal 
setting q solution of messages enciphered in this way would sc-em to b3 
rather hopeless. One circumstance, however, gives us in certain cases the 
possibility of breaking in 0 The substitutions, which are effective at each 
individual position of the message, are alphabetical and reciprocal. That 
means that at each position in the message only one definite substitution 
out cf a choice of 26 different ones is possible* These 26 different sub- 
stitutions come about because a noi :ial alphabet and a reverse standard al- 
phabet have been slid against each other* (Compare the sliderulej) At any 
rate, we do not know which of these 26 different possible substitutions will 
be effective at any given position* However, when messages appear which 
were enciphered with the same internal and external setting of the machine — 
and tnis is apparent from the similarity of the indicator groups on the same 
day— -a linguistic solution is possible. That is to say, if one superimposes 
two such messages, and if one knows at any given position the arrangement of 
the clear text letters in one of the two messages, one can determine, with 
the help of our 3lide, the clear text letters for the other message at this 
position. How one utilizes this fact in solution I will shew more clearly 
in the course of my remarks Q 

First, however, permit me a few more general remarks* The first use of 
the machine by the Americans occurred in December 1942 in the African theater 
of war* The messages are recognisable through two 5-letter indicator groups 
at the beginning of the message of the type AABCD EPGXI, which are repeated 
at the end of the message, mostly in the same order, but also some times re- 
versed. At another place I will go into more detail concerning the meaning 
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of the indicators,, The first messages in depth, that is, messages with like 
indicator groups, appeared in January 1943 • Since it was a matter of ex- 

ceptiorially long messages of 6C2 letters, the entry into the entire system 
succeeded with them* The two messages were linguistically solved and the 
first internal machine setting found analytically* 



When in April and May 1943, the then widely used strip system, kneran 
as M-94 or DRSAL strip, was supplanted by this machine, we could read this 
new traffic currently as long as messages in depth appeared* Thus, messages 
were solved from the theater of 7?sr in Africa, later in Sicily, and Italy, 
and also from the Anglo-American invasion army which w*s waiting in Eng~ 
land* Here it was mainly a question of practice messages, which, never- 
theless, were read currently and which gave valuable hints to Evaluation, * 
so that, by the beginning of the invasion, a rather clear picture of the 
strength and composition of the invasion army had been built up* Since 
the beginning of the invasion messages mainly from the Western front and 



from Italy are being worked on 
The internal setting of th 




valid for a definite key area 



and is changed daily* According to regulations, the indicator group and, 
with it, the external setting of the 6 key wheels, is supposed to be changed, 
from message to message, but fortunately this is not always done, for, 
otherwise, no rcessr.ges in depth would appear at all 0 

The machine is used principally for the encipherment of tactical Messages 
from division do?m to, and Including, battalions* Sometimes, however, even 



the corps use it* 



be noted that in Gerraan Signal Intelligence practice Kvalur- 



from Traffic Analysis and corresponds closely 



wo 



us ion" 
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Bo Solution of Messages la D epths 




Following this introductory survey I should like to proceed to a dis- 
cuss ion of the methods of the actual linguistic solution. If you will please 
recall what I said at the outset: viz., if I know the clear text at any 
position in one of two messages in depth, then, vrith the help of our slide, 
the clear text at the same position of the second message is very easy to re- 
constructo 

Here I shoul like to explain in passing just how vve came by this 3lide. 
(See Piguro 1. ) The illustration shows the type of wheel of the machine with 
the two reciprocal alphabets 0 In enciphering, the clear text letters are put 
in on the left hand alphabet, the machine is operated and the right hand alpha 
bet writes the cipher letters corresponding to the internal setting of the 
machine at the time* Our slides, then, are nothing more nor leas than thsse 
two circular alphabets unrolled and set next to each other as strips tfhich 
can be slid against each other 0 Thu3, if we know the relationship of clear- 

* 

cipher at one position, the slide iMediately furnishes us with the entire 
substitution alphabet which is effective at this position This fact can be 
exploited in the following manner: a word suspected to appear in one message 
—for example, a number—can be set down at all positions of the message and, 
at each position, corresponding clear text in the other message can be 
sought* If the suspected word is actually at any position in the message, 
then, at the same position in the second message, a fragment of clear text 
must appear. This method, however, is very bothersome and time wasting 0 
Therefore, we have attempted the simplification which follows. (See 
figure 2.) 

Let us assume that at all the positions of the first message the clear 
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tert letter a Z n apoears and see which clear text letters correspond to it in 



second 



mm for n A w « n 3 w . and 



Th3se 



responding 



as a heading, ve write the letters of the alphabet vith which we had begun* 
As you will see, by no means does this have to be done for all the letters of 
the alphabet, but, rhonever oao has a complete column, one can obtain the 



her letters by alphabetical progression* The completed strips are 



arart 



ting 



X&JSp?. 



the word THREB C ) The 2-3trip is made in duplicate since w Z tt can be tried as 
a separation letter before and after the suspected wordo In order that the 
clear text expected in the second message will appear in a line the trial 
met be built up step-wise 0 (Compare figure 3„) If you find clear text, 
or fragments of clear text , in the second message, you count the lines fron 
the top down, and obtain thereby the exact position in the message where the 
•jexts occur* Norj, vrith the help of our slice, you can try, alternately above 
and belor;, to build up further text* If the trial hits and is not a coin- 
cidence, then, in building up farther alternately above and below 9 clear 
text will have to appear* 

We have obtained the following t^y this method: by one trial of a word 
we can see at a glance whether this word actually occurs at any position 
of the nessagc* 

Further, it ha3 been shown to be very practical to use the sane strips in 
reverse procedure, that is, to try in the second message all the letters of 



the alphabet and after the other and to write dosm the corresponding letters 
of the upper message in coliems, one under the other * Then all we have to d 
is to turn the strips around and we can try the same probable work 5.n the 



other message 



-5 
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Strip writing by hand, especially for long messages, is a very tedious 
and time-wasting job, so we look for a method of doing it raeahanicallyo A 
very practical solution is the strip writer (invented by Ofu. POKORN*) which 

i3 bsscd on the following principles: 

In a ease of messages in depth, the interval between the two cipher letters 
is the same as the interval between the upperlying clear tort letters, only 
with reversed sign (algebraic). (See figure 4») U - D lias the interval 9o 
If we pit a H Z" against a tf U w we must put a w Q ff against the "P*. Z m Q has 
the interval w minus 9 n # So now we have only to ?/rite two similar alphabets 
(this time not reciprocals) under each other so that the letters which have 
an interval of 9 are above each other, being sure that the cipher relation- 
ship U - D corresponds to the clear text relationship Z - Q, only again in 
the reverse direction. 77e exploit this facto We devise two slides upon which 
the a?.phabets are written in the same direction. Ths outer slide is fixed 
in such a way that the letter U Z* is at the bottom. Now you must turn the 
inner slide so that the cipher letter of the f ir3t message is set a?>ove the 
cipher letter of the second message, that i3, above n D tt . Opposite the tt Z rf 
of the outer slide, then, always appears the clear letter which would corre- 
spond to a f, Z w at this position of the first message,, Thus we have, in 
order, the letters of our "Z n strip* With the inner slide, fastened tight, 
there is a type wheel which carries type slugs corresponding exactly to the 
inner slide, and one only has to draw type wheel across towards the right 
in order to obtain the alphabet beginning with the clear text letters of the 



-> 

(N.C.O., or Under officer, Alfred POKORN was a cryptanalyst attached to 
the American Hagelin Section of In 7/71 of OKH« See TICOM 1-175.) 
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•Z" column. Thus, to a certain extent, the apparatus combines into one pro- 
cess the actual writing of the alphabets and the seeking of the initial letter 
of each line appearing in the "Z ff column 0 (See figure 5 and 6) c 
2c Blg raphic Frequencie s* 

JJow bac] to the tert. It often occura that the alternating construction 
of clear te;ct cannot be continued as far as desired, but that a place is 
reached where, both above and below, a word ends and so a n Z* appears in both 
messages 0 One can then guess what follows and try to build up further text 
as before* If that does not succeed, one can renew the trial of probable 
words without strips and, in this way, try to obtain a na?r break-in at another 
pointc If that is not successful either, there is still a third method of 
making progress, that is, the so-called Bigraph Frequency 0 (See figure 7*) 
Tbe naroe iteolf reveals its nature c At the point following the n Z w in both 
messages i new word has to begln 0 So we seek out in the next two positions 
all the bigraphs which could yield, in both messages at the same time, possible 
Snglish words or good abbreviations* For this purpose we devise special strips. 
Firot of all we try, at the first position in one of the%K> massages, all of 
the letters of the alphabet, and we r/rite this alphabet on a strip, and under 
each latter we OTlte, in RD and displaced a little to the right, its corre- 
epondjUig letter from the second massage* Do the 3ana thing for each sue- 
ceediog position. Then we begin to move the second strip past the first one, 
seeking out, in one line, all the positions which give possible English clear 
text bir-raphs for both the red and black letters * Alongside these we then 
build up, with the next strip, a third letter, then the fourth, and so on. In 
this way we oust at last, cone upon the correct continuation if there is no 
garble —in ^hich case one would not be able to find the correct bigraph. If 

-7- 
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or/; has found the continuation, the further building up proceeds as des- 

erlbtd above* 



3u Text Offset by One Place 




With certain provisions there is still another possibility of attaining 
very quickly a solution of messages in depth, and that i3 when messages appear 

which completely agree in the first cipher groups o In such a case the same 
text must have originally been in both fiassages^ At soma position, then, 
this agreement of tha cipher tert ceases o If it Xs not a case of a cipher 



istako (garble) or omission of letters or groups in the cipher test, then 

at this position the clear text of the two messages must become divergent 0 
It way be that the continuing text, foliating a stereotyped beginning, is 
completely different in the two Mpsages* Then our strip atthod must be used 
for solution Often, however, farther on in both messages there is similar 
tert, except that, at the breaking-off point in one of the two aessages, a 
letter was omitted or mistakenly added, so that now the clear text in the 
two messages appears off -set by one c If such is the case, there is a very 
simple method of reconstructing this off -set clear text 0 (See figure 8 C ) 
l^t us assume that at the first position after tha parallel there <zas 



an w A n in the upper message, then this would correspond to *D* in th»l«Mr 
message 0 Hon, if the upper message, with respect to the loner one, is off- 
set one place to the right, the n D n would have to appear again in the upper 

dosage in the next position, and the "F*, which corresponded to it in the 
lower message, must appear at the third position above, etc 0 However, since 
ar>y letter of the alphabet could have stood in the first position above in- 



ste&d of the arbitarily assumed "A", we must carry through the sane method 
for all the letters of the alphabet 0 Since for "B", *C n , etc,, one always 
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gets the letters which folio* it in the alphabet , one has only to writo the 
rest of the alphabets, column-wise doan, and clear text must be found in one 
of the 26 rows. In our example, either in the upper message a double 
haa been sent, or in the lower message the separation n Z B was forgotten. 
According to experience the sending of a double "Z w occurs most often,, So, 
in the trial of an off -set by one, one will always begin by trying a n Z w 
at tho first position after such parallels in the upper or lower message, 
then one gets tho correct clear text immediately and saves oneself the trouble 
of writing down the alphabets. For the other case, we hare set up a table 
on which tho alphabets have already been m^itten dorm so that we have only 
to bring them into the correct position in order to seek out the clear text 
from one of the 26 rows* The question arises how is a garble (transmission 
garble) made noticeable in this method? Naturally, in the line of clear 
text which we have found, the text stops at this position, but it just jumps 
over to another line* Not only that, but the interval or jump, from the 
original line is just as much as the garbled cipher letter is different from 
the correct one* In our example we assumed the garble W Q W instead of "0" and 
we see that the clear text jumps up exactly tro lines further on p 
4o Offset by Taro c 

A quite similar system can be employed in the ca^e of a suspected offset 
of two in two similar texts « It can easily occur that, through a second error 
which works in the same direction as the first, a message is offset by one 
letter further* (See figure 9o) In this connection one must consider the 
following: the letter of the lower message which corresponds to the clear 
text letter tried in the first position of the upper message dees not appear 
again until the third position in the upper message j the letter corresponding 
to tai 3 one occurs at the fifth position, etc* ftith that method we obtain, 
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by alphabetical continuation, a kind of a grid. Furthermore, with an offset 
of two, the second, fourth, sixth, etc., letters etand&dependoat on each other, 
so one can use this method for theta also, thereby obtaining a second square 

\ 

which can be interlocked, step by step, into the first one* After every step 
one must test the 26 lines which come out against the clear text, therefore 
26 x 26 lines in alia In one of these 676 rows we crust find the desired clear 
text* faturally this system can be extended at will for offsets of 3 , 4, 5 9 
etc c , but that becomes too complex and time-wasting, so one works more quickly 
and surely with out strip method. 

Furthermore, with an offset of one or two only a short fragment of clear 
text needs to be tested in this manner, since , with only the help of our slide, 
od ■* can build further without any trouble up to the point where either a 
garble or a new offset appears,, 

5o Depth x When the Double Letter in the Indicator Group is Afferent 9 
How there is one other case to be discussed, one in which the messages in 
depth are not obtained until later, that is ? when two messages are available 
in which the indicators agree except for the doubled letter 0 In order to make 
the following understandable to you, I must insert a few short words concern- 
ing the meaning of indicator groups and the enciphering technique of the 
Americans o 

The ten letters of the indicator groups have the f ollowing meaning* Th<s 

last two letters (XI) denote the cipher area or cryptosystem net in which 

the key in questio is effective 0 The six letters ftora the third to the 

eighth position (the third group) indicate the basic setting of the six key 

wheels. They are to be chosen arbitarily by the radio man, but of course 

they must be within the scope of the wheels 0 The double letter in the first 

two positions (of the first group) serves to encipher this basic position 

-10- 
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^nd is also to be chosen arbiter ily by the radio man* This double letter is 
enciphered 12 times r;ith the basic setting and the first six usable letters 
which come out of this encipherment then give the real starting position of 
the six key wheels* Only with this setting can the message be decipheredo 

Example » In enciphering the double letter "A" twelve times, the letters 
R BZDXHMPQTAS might appear, The initial setting of the machine for 
the message to be deciphered would then be R B D H fi F, since the letter "Z" 
does not appear on the 23 wheel, and the letter w X n does not appear on the 
21 wheel, and therefore these must be strickened out.? 

Now if we have two messages in which the indicator groups agree except 

for the doubled letter«~for example in one of them the double letter is A aitf 
in the other one it is B— then under certain circumstances we can, by sliding 

the messages against each other, obtain the genuine messages in depth* That 
is to say f if the encipherraent with the double letter n k n gave the letters as 
above, then the encipherment of the double letter n B w will give the letters 
which proceed thea in the alphabet, or therefore, QAYCWGLEPSZRo 
The initial settings of the two messages are therefore R B D H M F and Q A C 
G L E„ Now, if you set the machine at the initial setting of the second 
message and encipher a letter, each one of the *ix key wheels will move 
forward one step, that is, one letter farther along in the alphabet* So, 
thereby, the exact initial setting of the first message is arrived at and the 
two messages are in depth from this point on 0 Thus, in this case, we obtain 
messages in depth if we omit the first position of the massage with the double 
letter "B^o In the case of an offset from A to C 9 we would have to omit two 
letters, and in the case of an offset from A to D, three letters, etc c 

& vr?vTj one point must be considered in this connection. The depth in 
the messages could appear because one letter had to be struck out (of the 
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of the doubled letters) of our two encipherments at the same 
positions c If this is not the case, then we do not get any messages in depths 

Let us assume that in the encipherment of tie double letter "A" 
we vculd. obtain the following aeries of letters i R BWDXHTFQTAS. 
Then the encipherment with £ would beQAVCWGSEPSZ. low the initial 
settings of the two messages would be as follows: RBDHFQ (if X T had to be 



thrown out), and Q A V C G E (W and S had to be thrown 
that thase two initial settings now have very little in 



will be 



namely, only 




the first two positions* In this case, naturally, no depth can be found by 
'sliding the two messages against each other 0 It is illuminating that the 
probability of elimination of letters, which has to be done at the same posi~ 
tion, becomes smaller and xialler the greater the distance the two doubled \J\J$ 



letters are separated from each other 



m 



0 



1 



Criteria for Depths 

Trigraph Differences (S** figure 10) 



What has just been discussed covers the most important methods for recover* 
ing plain text from messages in depth* ^ut very many of the messages with simi- 
lar indicator groups, which come to us from the field stations, are not genuine 
messages in depth at all, but are messages with the same text which were en- 



ciphered twice in succession 



first encipherment a mistake was 



•ado in the setting of the machine o For this reason the real addressee c 
could not decipher the message, sent a query back, and then the message was 
sent again with the correct encipherment 0 Linguistically such messages can, 



of course, not be solved 0 Often 



lesseges can be recognized by their 



external appearance on account of a large number of doublets (vertical di~ 
graphs) in the two cipher texts, by the appearance of quite definite intervals 

between the cipher texts, with similar or almost similar length, with »$ J'j.ar 
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tactical times, while the intercept time usually is one or several hours apart. 
0.''ten, however, it is not possible to decide in advance whether these are 
massages in depth or not f and therefore, a criterion has been sought which 
could give us a clue as to whether a pair of messagesjjj^fr in depth or not c In 
doing that, as already explained above, the fact has been employed that the 
intervals between the cipher letters are exactly the same to each other as 
the intervals of the correspond inf clear text letters -«only with opposite 

signs. 

From solved M-209 messages from Africa, out of 10,000 letters the 300 
most frequent clear text trigraphs were counted (taking into account the 
separator letter fl Z") and the clear text intervals of these trigraphs to each 
other were determined* The differences found corresr>ono to the negative cipher 
intervals in messages in depth* The triple number (Zahlentripel) which arose 
was weighted with values built up simply from the product of the frequencies 
of their occurrences, since the probability that two definite clear text tri- 
graphs will a ppear over each other is equal to the product of the frequency 
of the percentage of their occurrence „ 

From these differences a table was prepared which Indicates for us the 
corresponding weight for every possible Zahlentripelo One now finds each 
interval triple which appears in the two cipher messages, in the upper as 
well as in the lower message, and adds up the weights which apply to them c 
The sum is then raultipled by 100 and divided by twice the number of positions 
being investigated,. It is multiplied by 100 in order to get a relationship 
to 100 positions, and divided by twice the 3um of the investigated positions 
since we have looked up each position twice— once in the upper and once in 
the lower message,, For this reason the different aign of the intervals for 
the clear and cipher text has no meaning. The final result then gives us a 
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, oint of departure for telling whether the meseages being investigated are in 
depth or not* Experience has shown that values of 50,000 or more make depth 
probable* Values under 4.0,000 speak against depth, and with numbers in be- 
/een 40,000 and 50,000 owe can count on either possibility* Of course, in 
doing this, scattering (Streuungea) and coincidences must be taken into 
account 0 These things can ii-ake a considerable distortion of the picture, 
especially in short messages^ nevertheless, up to now, we have, in general, 
been able to depend on the results, particular ily in rather long messages.. 
2o Other Criteria 



Other criteria by which depth can be determined are more of an external 



nature 



a 0 Rumber of Doublets * The doublet frequency of two English clear 



texts whan a word separator letter is used is about 3% c In the elpfcor text 
of messages in depth, however, doublets occur only when there also are doublets 
at these positions in the basic clear texts 0 A doublet frequency of between 
6 and 8 percent in our cipher text, therefore, signifies depth. This doublet 
criterion is not valid for messages which are offset by one in thoir clear 
text, since in this case doublets can occur only when two similar clear text 
letters follow each other, as for* example, BE, SS, TT, etc 0 T he expected 
ralue here is 2*$* 



b^ Different Length and Different Encipher ment Timet 



a 



With the same length and the same encipher ment time then; is always the 
suspicion that we are defiling u.Vth the same text in both messages and that it 



was only sent one time wrong and one time correctly* Here we obtain, by 
means of our trigraph differences, a starting point for depth* 
Do Difficulties in the Solution of Messages in Depth » 

After all that I have aald and shown to you up to now you could get the 
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impression that the solution of machine messages in depth was a quite simple 
affair* But I have purposely chosen simple examples, which, furthermore, are 
all based upon genuine solutions of cases in which the individual methods lent 
themselves well to description. In conclusion I should like to show you a- 
notrier pair of messages of recent date which trill demonstrate to you what 
difficulties one often has to overcome in solution 0 

There was the case of a pair o? massages dated 15 December 1944 which was 
sent to us on 16 December 1944 by teletype from KOMA 7 in Italy* The length 
of the t*o messages was different, likewise the time of encipherment* The 
number of doublets was favourable., There was even a three parallel position, 
and the trigraph differences gave a calculation of 51,000 on 170 letter s e 
All criteria, therefore, pointed towards depth. (See figure 11) 0 

Within a very short time after preparing the strips, there were two 
unmistakable break-ins, (See red underline in figure 11) but there were not 
yet enough letters avialable in order to reconstruct the internal setting of 
the machine* We worked a whole day dragging through the message, without any 
success, frequent words from a liat we had made ourselves* The short red 

t 

position in the first line could not be built further and could, under cer- 
tain conditions, be an accidento A digraphic frequency at the beginning was 
also unsuccessful., After the first break-in position there should come a 
proper naras e It was, therefore, not suitable for a digraphic frequency, Ths 
second break-in was right at the endo A digraphic frequency from in front of 
it leading backwards also led to nothing, although we had at our disposal 
as an aid a dictionary which was arranged alphabetically backwards » So, 
there waa nothing more to do than to keep on dragging through new words, and 
at last we succeeded in breaking in with the word PIEU)* ^ith that the other 
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red pieces also fell apart immediately and now the internal setting of 1 
machine could be reconstructed *ith relative ease? 

After that the parts of the message which, up to then, had not been 



soiled were easily reed 



One will admit fur 



the aid of our strips, by using proper names and infrequent words 
hardly have been possible* 



With this 



ogni 



essage the complications which the Americans attempted can be 
Stereotyped beginnings are, of course, forbidden, and likewise 
the eneipherment of nulls by "X" or W Z" at the end of the ■essage. They 
even have the messages begin in the middle of * sentence and then give the 
real beginning of the aessage somewhere in the middle, The beginning is 
made recognizable by the words MSG BGWS (message begins) or, in our ex- 



petition of one letter 



have even had cases 



a beginning of a message only a part of a word appears; thus 
, "-sage", end the message then ends with the letters B raes- fl « 
naturally, you can have no success from making a digraphic fre- 



quency 



<* 4- 
8. • j 



the beginning of the message 



Another possibility, often used 



filling 



sages at will at r.he beginning and at the end 



After 



10 nonsense letters the real mesemge begins 



are principally 



given only somewhere in the middle of the message, inclose either 
abbreviations PARBM, CMa. PD, CLB, CR XXX, 



Further 



/ 

take account of many abbreviations, in the invent 



Americans are great and completely unmethodical 



6> 




can in the 
difficult. 



tha 



itege of garbl 



the reconstruction of an already unknown text very 
there is always a sometimes greater, sometimes smeller 
But the most unpleasant thing is that now often even 



our main source of entry— are not written out anymore but are 
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sent as doubled letters: 1 ie aaj 2 is bb; 3 is cc5.... 0 tf is jj. And then 
when, as in this aessage, you add many personal names and infrequent words, 
the solution can often be very difficult. Then you hare to have much patience 
experience, and, added to that, a little bit of "fingertip feeling" in order 
to coae to ths desired success,. 
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German Use of **,he Baudot Code 



I ■ Upper Case (same as typewriter shift key) 

8 = Lower Case { 3hlf ting back after machine has been in upper ca3e 



9 = Space 



These three symbols a 
3, 4, / are not used. 



lore consecutively 



Upper case symbols: 

Numbers are represented oy the 
keyboard in upper case, i.e., 

125456789 
QV/2RTYUI0 



first row at- the typewriter 



0 
? 



Upper case M 
Upper case A 
Upper case K 
Upper case L 

Upper case V 

Upper case S 
Upper case S3 



r period, or dit . 

= dash 

= open parentheses 

= close parentheses 

= some sort of spacer 

= apostrophe 
- quotes 



C 



Frequently a string of K's indicate an error has been made, word 
will be reprinted. 

Every time a nuirber is given, i.e. + -f- VJRTS89, later in the 

essage the nu2:i:ers will be spelled out ZWC VIER FUENF. ' 



Abbreviations 
the message. 

THE ODOR will 



will also be spelled out phonetically later in 
II he givsa call :ig:as GW£, later GUSTAV WORD POL 
ippear . 



Messages almost always begin i~ 4- ZZZ 
German Phonetic Alphabet: 
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2. 
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CAESAR 




DREI 
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SECHS 
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MARTHA 
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QUELLE 






RICHARD 
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THEODOR 
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VIKTOR 






WILHELM (VILLI) 






XANTHIPPE 






YPERH 






ZEPPELIN — - -. m ■ 
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